m 

o 

(N 






^ 



Positive provability logic 
for uniform reflection principles 



Lev Beklemishev* 



P^. April 18, 2013 

< 

Abstract 

^^ . We deal with the fragment of modal logic consisting of implications 

, 1 ' of formulas built up from the variables and the constant 'true' by con- 

junction and diamonds only. The weaker language allows one to interpret 
the diamonds as the uniform reflection schemata in arithmetic, possibly of 
unrestricted logical complexity. We formulate an arithmetically complete 
calculus with modalities labeled by natural numbers and cj, where uj cor- 
responds to the full uniform reflection schema, whereas n < uj corresponds 

fvq ' to its restriction to arithmetical n„_|_i-formulas. This calculus is shown 

^ . to be complete w.r.t. a suitable class of finite Kripke models and to be 

^O ' decidable in polynomial time. 

o\ 
cn 

'^. ' 1 Introduction 

O 
en 



Several applications of provability logic in proof theory made use of a polymodal 
logic GLP due to Giorgi Japaridze [Ml [9]. This system, although decidable, 
is not very easy to handle. In particular, it is not Kripke complete [9j. It is 
complete w.r.t. the more general topological semantics, however this could only 
be established recently by rather complicated techniques [2]. 
C^ ' A weaker system, called Reflection Calculus and denoted RC, was intro- 

duced in ^. It is much simpler than GLP yet expressive enough to regain its 
main proof-theoretic applications. It has been outlined in [8] that RC allows 
to define a natural system of ordinal notations up to eo and to serve as a con- 
venient basis for a proof-theoretic analysis of Peano Arithmetic in the style of 
[U [5] . This includes a consistency proof for PA based on transfinite induction up 
to eO) a characterization of its Il^-consequences in terms of iterated reflection 
principles, and a combinatorial independence result. 

From the point of view of modal logic, RC can be seen as a fragment of 
polymodal logic consisting of implications of the form A —^ B, where A and B 
are formulas built-up from T and prepositional variables using just A and the 
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diamond modalities. We call such formulas A and B strictly positive and will 
often omit the word 'strictly, o 

A somewhat different but equivalent axiomatization of RC (as an equational 
calculus) has been earlier found by Evgeny Dashkov in his paper |10| which 
initiated the study of strictly positive fragments of provability logics. Dashkov 
proved two important further facts about RC which sharply contrast with the 
corresponding properties of GLP. Firstly, RC is complete with respect to a 
natural class of finite Kripke frames. Secondly, RC is decidable in polynomial 
time, whereas most of the standard modal logics (including GL and GLP) are 
PSPACE-complete. 

Another advantage of going to a strictly positive language is explored in 
the present paper. Strictly positive modal formulas allow for more general 
arithmetical interpretations than those of the standard modal logic language. 
In particular, propositional formulas can now be interpreted as arithmetical 
theories rather than individual sentences. (Notice that the 'negation' of a theory 
would not be well-defined.) 

Similarly, the diamonds need no longer be interpreted as individual consis- 
tency assertions but as the more general reflection schemata not necessarily 
having finite axiomatizations. Thus, for example, the full uniform reflection 
schema can be considered as a modality in the context of positive provability 
logic (see |171 [5] for general information on reflection principles). Such inter- 
pretations are not only natural but can be useful for further development of the 
approach to proof-theoretic analysis via provability algebras. Thus, positive 
provability logic allows to speak about certain notions not nicely representable 
in the context of the standard modal logic. 

The main contribution of this paper is a Solovay-style arithmetical com- 
pleteness result for an extension of RC by a new modality corresponding to 
the unrestricted uniform reflection principle. This is the primary example of 
a modality not representable in the full modal logic language. The system 
obtained is shown to be decidable and to enjoy a suitable complete Kripke 
semantics along with the finite model property. 

Whereas the modal logic part of our theorem is a simple extension of 
Dashkov's results, the arithmetical part is more substantial. We introduce 
a new modification of the Solovay construction using some previous ideas from 
[16\ \T5\ [7] . Since the arithmetical complexity of the unform refiection schema is 
unbounded, a single Solovay-style function is not enough for our purpose. In- 
stead, we deal with infinitely many Solovay functions, of increasing arithmetical 
complexity, uniformly and simultaneouslyo 

The paper is organized as follows. Firstly, we introduce positive modal lan- 
guage and the systems leading to the arithmetically complete refiection calculus 
RCcj. Secondly, we present the details of its arithmetical interpretation and 
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somewhat tediously prove the corresponding soundness theorem. Thirdly, we 
study the Kripke semantics of positive provability logics and obtain complete- 
ness results, along with a suitable version of the finite model property. Fourthly, 
we obtain polynomial complexity bounds for the derivability problem in RCa; 
by adapting the techniques of Dashkov. Finally, we prove the main result of 
this paper, the arithmetical completeness theorem for RCoj. 

2 Reflection calculus and its basic properties 

Consider a modal language C with propositional variables p,q,. . . , a constant 
T and connectives A and a, for each ordinal q ^ a; (understood as diamond 
modalities). Strictly positive formulas (or simply formulas) are built up by the 
grammar: 

A ::= p \ T \ {A A B) \ aA, where q ^ a;. 

Sequents are expressions of the form A \- B where A, B are strictly positive 
formulas. The system RJ is given by the following axioms and rules: 

l.A^A; AhT; if yl h S and S h C then A h C (syllogism) ; 

2. AABh A; A A B h B; iiAhBandAhC then Ah BaC; 

3. if A\- B then aA h aB; aaA h aA; 

4. af3A h I3A; /3aA h (3A for a ^ /3; 

5. aAAl3B\- a{A A (SB) for a > /3. 

The systems RC and RCw are obtained from RJ by adding respectively 
one or two of the following principles: 

6. aA \- f3A for a > f3; (monotonicity) 

7. ujA \- A. (persistence) 

Dashkov [10] showed that RJ, restricted to the language without uj modality, 
axiomatizes the strictly positive fragment of the polymodal logic J |£j, whereas 
RC axiomatizes the strictly positive fragment of GLP. 

Notice that Axioms 4 are redundant in the presence of Axiom 6: if a ^ /3 
then a^A h /3/3A h /3A and ^aA h /3/3A h ^A. 

If L is a logic, we write A\-l B for the statement that the sequent A\- B 
is provable in L. As a simple example, consider the sequent 

uj{p Aq)\- {ojp A ujq). 

It is provable in RJ as follows: We have p A q \- p, hence uj{p A q) h ojp. 
Similarly, uj{p A g) h ujq^ therefore uj{p A q) \- {ojp A ujq), by the conjunction 
rules. In contrast, {up A ujq) Frco; ^{p A q), as we shall see below by a simple 
Kripke model argument. 



We also consider the fragments of various logics obtained by restricting the 
language to a subset of modalities. Such a subset 5 C cj + l is called a signature. 
We denote by Cs the set of all strictly positive formulas in S. Similarly, for a 
logic L in >C we denote by L5 the restriction of the axioms and rules of L to 
the language £5. 

For a positive formula A, let i{A) denote {a ^ u : a occurs in A}. 

Lemma 2.1 (i) // A Krj B then 1{B) C e{A); 

(ii) If A hi B where L is RC or RCtj, then i{B) C [0, max i{A)]. 

Proof. In each case, this is proved by an easy induction on the length of the 
derivation of A\- B. □ 

Let C[A/p\ denote the result of replacing in C all occurrences of a variable p 
by A. If a logic L contains Axioms 1, 2 and the first part of 3, then h^ satisfies 
the following positive replacement lemma. 

Lemma 2.2 Suppose A \-l B, then C[A/p\ h^ C[B /p], for any C . 

Proof. Induction on the build-up of C. □ 

A positive logic L is called normal if it contains the rules 1,2, and the first 
part of 3, and is closed under the following substitution rule: \i A\-l B then 
74[C/p] \-L B[C /p\. It is clear that RJ, RC and RCtj, as well as their restricted 
versions, are normal. 

3 Arithmetical interpretation 

We define the intended arithmetical interpretation of the positive modal lan- 
guage. The idea is that propositional variables (and positive formulas) now 
denote possibly infinite theories rather than individual sentences. To avoid 
possible problems with the representation of theories in the language of PA, 
we deal with primitive recursive numerations of theories rather than with the 
theories as sets of sentences. 

All theories in this paper will be formulated in the language of Peano Arith- 
metic PA and contain the axioms of PA. It is convenient to assume that the 
language of PA contains the symbols for all primitive recursive programs. A 
primitive recursive numeration of a theory S" is a bounded arithmetical formula 
(t{x) defining the set of Godel numbers of the axioms of S in the standard 
model of arithmetic. Given such a a, we have a standard arithmetical Si- 
formula □^(x) expressing the provability of x in 5 (see [H]). We often write 
□o-(/3 for ng.('~(^~'). The expression n denotes the numeral 0' • • •' (n times). If 
'^{v) contains a parameter v, then 0^ip{x) denotes a formula (with a parameter 
x) expressing the provability of the sentence ip{x/v) in S. 

Given two numerations a and r, we write a hpA t if 

PA h Vx (□r(x) -^ a^{x)). 



We write o" h r if N 1= Vx {n^(^x) -^ □(t(x)), that is, if the theory numerated by 
a contains the one numerated by r. We wih only consider the numerations a 
such that a hpA o"pa, where upA is some standard numeration of PA. 

With any finite extension of PA of the form PA + (/? we will associate its 
standard numeration upA V (x = '~(p~^) that will be denoted if. For obvious 
reasons we have: c/9 hpA ip iS ip \- ip iS PA + ip \- ip . (The statement (p hpA ijj 
implies PA + (p\- ip hy the soundness of PA, the converse is formalizable in PA.) 

Given a numeration a of S, the consistency of S is expressed by Con{a) := 
^0^±. A theory S is called n- consistent if S together with the set of all true 
S„+i-sentences is consistent. The n-consistency of S is expressed by the formula 

Con„((T) : Vx G n„+i {a^{x) -^ T„(x)), 

where T^ is the standard n„+i-truthdefinition for n„+i-formulas (see [13j) and 
X G Hn+i denotes the primitive recursive formula expressing that x is a Godel 
number of a n^+i-sentence. 

Concerning the truthdefinitions we assume that PA h y? -H- Tn^ip^), for each 
n„+i-sentence (p. Moreover, this very fact can be formalized in PA uniformly 
in n: 

PAhVnVxen„+inpA(xoT„(x)), (1) 

as the sequence of formulas '~r„~' is primitive recursive in n and the correspond- 
ing proofs are constructed inductively. 

The formula Con„((T) is often called the global Hn+i-reflection principle for 
S and is denoted RFNn„+i(5') (see [I8l|3]). We note that the formula Cono(a") 
is PA-provably equivalent to Con{a). 

The uniform reflection principle for S is the schema 

Con^{a) : {Con„((T) : n £ oj}. 

It is well-known that Con;^{a) is PA-provably equivalent to the schema 

Vx {a„(p{x) -> ip{x)), 

for each arithmetical formula (p{x), which is usually denoted RFN(S'). 

The uniform reflection principle is elementarily axiomatized, and we fix 
a standard function mapping any numeration a to the numeration of PA + 
Coni^{a) (denoted Con, ^,(cr)). Similarly, the formula 

crpA(x) V X = '~Con„((T)~' 

numerating the theory PA + Con„((T) will be denoted Con„(cr). 

The intended arithmetical interpretation maps positive modal formulas to 
primitive recursive numerations in such a way that T corresponds to the stan- 
dard numeration of PA, A corresponds to the union of theories, n corresponds 
to the standard numeration of Con„, for each n < oj, and u to the standard 
numeration of Con^^. 

Definition 3.1 An arithmetical interpretation is a map * from positive modal 
formulas to numerations satisfying the following conditions: 



• T* = (Jpa; (A A B)* = {A* V B*); 

. (nAY = Con„(^*); (ojA)* = Con^{A*). 

It is clear that the value A* is completely determined by the interpretations 
p*, . . . ,p* of all the variables occurring in A. 

Proposition 3.2 (soundness) Suppose A \—r,Cuj B, then A* hpA B* , for all 

arithmetical interpretations *. 

Proof. Induction on the length of proof of A h S in RCw. The validity of the 
first two groups of rules of RCa; is obvious. We treat the modal axioms and 
rules. 

If a hpA r then clearly Con „ (a) hpA Con ^fr), for each n < uj. Since this fact 
is formalizable in PA, we also obtain Con^(cj) hpA Con„, (T). Also, the validity 
of the monotonicity axioms 6 is clear. Next we need the following lemma. 

Lemma 3.3 (i) Let S he numerated by a and ip S II^+i. If S h ip then 
PA + Con„(cr) h (p; 

(ii) Statement (i) holds provahly in PA uniformly in n, that is, 

PA h Vn Vx G n„+i {a„{x) -^ □con„(<7)(a:)). 

Proof. We only prove Statement (ii). We reason in PA as follows. 

Assume x £ Hn+i and □o-(a^)- Then □pa(x S n„+i A n^(x)). On the other 
hand, by the definition of Con„((T) 

°CgnJa)^y i^Ay) A y E U^+l -^ Tn{y)). 

This yields 

°Con„(a)(D<T(S) A X G n„+i -^ T„(x)), 

so we obtain ^conja)Tn{x), and hence □con„((j)(3^) by ([I]). □ 
Corollary 3.4 (i) Con „( Con „((j)) hpA Con ^fo"), for all n < uj; 
(ii) Con^(Con^(CT)) hpA Con^(cr). 

Proof. Since the theories numerated by Con „ (a) and Con „( Con „((j)) are finite 
extensions of PA, for a proof of Statement (i) it is sufficient to show 

PA + Con„(Con„((j)) h Con„,(CT). (2) 

Since Con„ (cr) is a n„-|_i-sentence, we can take in Lemma [3.3l (/? = Con„(cj) and 
S = PA + 9?. This yields statement ^. 

For a proof of (ii), we show an informal version of this statement by an 
argument formalizable in PA. We must prove that, for each n < oj, 

PA + Con,„( Con,., (o-)) h Con„(o-). 



Using the monotonicity and Statement (i) we reason as follows: 

Con, ., ( Con,., (g)) hpA Con„( Con,., (o-)) hpA Con„(Con„(o-)) hpA Con„(cj). 
This shows the claim. □ 

Corollary 13.41 shows the soundness of the third group of rules of TiCoj. As 
we mentioned above, the fourth group is actually derivable from the first three 
and the monotonicity, so we can skip it. We show the soundness of Axiom 5. 

Lemma 3.5 If n > m then PA h Con„((T) A Conm{T) -^ Con„(o" V Con^(r)). 

Proof. We reason in PA as follows: If 93 € n„+i and CHo-vCon {t){v)^ then by the 
formalized deduction theorem □o-(Conm('7") — ?> ip). Since m < n, the formula 
Conf„(T) -^ ip belongs to n„+i. By Con„((T) we obtain T„('~Conm(T) — )■ 93^) 
whence T„('~Conm(T)~') — )• TnC~ip~^). Since Conm(T) G n„+i, from Conm,(T) we 
infer r„('~Conm(T)^). Hence T„('~99^), as required. □ 

Corollary 3.6 Con,,, (cr) V Con ^fr) Hra Con,,, (a V Con„(r)). 

Proof. Informally, we must prove, for each n, that 

PA + Con^(cj) + Con^(T) h Con„(o- V Con,^(r)). 

We can assume n > m and then use the previous lemma. This argument is 
formalizable in PA. □ 

Corollary 3.7 Con^(cr) hpA cr. 

Proof. We reason as follows: 

PA h n^(x) -^ 3n{x e n„+i A a^{x)) 

-^ °ConJa)(a^)- ^ 

This shows the soundness of the remaining Axiom 7 of RC and completes the 
proof of Proposition 13.21 □ 

4 Kripke models for RCo; 

Kripke frames and models are understood in this paper in the usual sense. A 
Kripke frame W for the language Cs consists of a non-empty set W equipped 
with a family of binary relations {Ra)aes- A Kripke frame W is called finite if 
so is W and all but finitely many relations Ra are empty. 

A Kripke model is a Kripke frame W together with a valuation v : W x 
Var —7- {0, 1} assigning a truth value to each propositional variable at every 
node of W. As usual, we write W, x Ih ^ to denote that a formula A is true at 
a node x of a model W. This relation is inductively defined as follows: 



• W,x Ih p <^=^ v{x,p) = 1, for each p G Var; 

• W,xlhT; y\),x\'rA^B ^^ (>V,x Ih yl and >V,x Ih 5); 

• W, X Ih aA ^=> 3y {xR^y and W, y Ih A). 

We call a RJs -frame a Kripke frame satisfying the following conditions, for 
all a, /3 € 5 and all x,y,z ^ W: 

• xRayRjjZ implies xR^y, if 7 = min(a,/S); (polytransitivity) 

• xRay and xii^z implies yR/sz, if a > /3. (condition J) 

These conditions can be more succinctly written as RaRfS ^ -Rmin(a,/3) and 
R~^Rp C i?^. An RCs-frame is an RJ^-frame that is monotone, that is, 
^Q ^ ^/37 for each /3 < q. An RJs-model (RCs -model), respectively, is a 
Kripke model based on an RJs'-frame (RCs-frame). We speak about RJ- and 
RC-frames and models whenever S = uj + 1. 

The persistence axiom ojA h A does not correspond to a frame conditiono 
We call a Kripke model (downwards) persistent if, for each variable p, 

W, x\\- p and yRuiX => W, y Ih p. 

By a straightforward induction we obtain the following lemma. 

Lemma 4.1 Let W be a persistent Kripke model based on a poly transitive 
frame. Then, for each positive formula A, 

W,x\^ A and yR^x ^ W, y Ih A. 

We say that a sequent ^ h i? is valid in a Kripke model W, if 

yxeW{W,x\^ A => W,x\^B). 

A logic L is sound for a class C of Kripke models (of the same signature), if 
every sequent A \- B provable in L is valid in any model from C. It is easy to 
see that our logics are sound for their respective classes of models. 

Lemma 4.2 (i) RJs is sound for the class of all RJs-models; 
(ii) RCs is sound for the class of all RCs-models; 
(iii) RCws is sound for the class of all persistent RCs-models. 

A proof of this lemma is routine. 

Notice that the frame conditions for the logics RJs and RCs (that is, poly- 
transitivity, condition J, and monotonicity) are closure conditions. Therefore, 
for any Kripke frame W = (W, {Ra)aes) there is an RJs-frame (RCs-frame) 
W = {W, (Ra)aes) such that 



'^Notice that the more famiUar form of this axiom is the principle A -^ OA which has no 
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• Ra ^ Rai for each a G S; 

• For any other RJ5-frame (RCs-frame) {W,{R'^)a£s) with Ra C i?^, for 
ah a G S, we have Ra ^ -Rq, for ah a & S. 

The frame W is unique up to isomorphism. We call it the RJs-dosure (RCs- 
closure) of W. 

Example 4.3 Consider a Kripke frame W = {W, {Ra)a^uj) with W = {0, 1, 2}. 
Relation iJ^^ consists of two pairs ORcal and 0Rcj2, and the other relations are 
empty. Let W be the RC-closure of W. It is easy to see that R^j = Ruj, whereas, 
for each n < uj, Rn \ {1, 2} is a total relation, Oi2„l and 0Rn2. 

Further, we define v{x,p) = iff x = 2, and v{x,q) = iff x = 1. This 
makes (W, v) a downwards persistent RC-model falsifying ojp Aug \- uj{p A q) 
at 0. By Lemma [32] we conclude top A ujq Frcw ^{p A g). 



The completeness proofs in all these cases are also easy. As in Dashkov |10j , 
we present an argument based on a (simplified) version of filtrated canonical 
model. 

Let $ be a set of /3-formulas. Denote £($) := {a ^ oj : a occurs in some A € <&}. 
A set $ is called adequate if $ is closed under subformulas, T G $ and 

• If /3^ e <1> and /3 < a e ^(<I>), then aA G <I>; 

• For any variable p, if p € <I* then ujp € <!•. 

It is easy to see that any finite set of formulas can be extended to a finite 
adequate set. 

Let r be a set of >C-formulas and L a logic. We shall take for L one of RJ, 
RC or RCw, or their restricted versions in the language Cs where S* C a; + 1. 
We write T \-i B \i there are formulas Ai,. . . ,An S T such that the sequent 
yli A • • • A An \- B is provable in L. 

Fix an adequate set of formulas $. An L-theory in <1> is a set x C <!> such 
that X \- A and ^4 G $ implies A € x. Define a model Wl/^ as follows. The 
set of nodes Wl/^ is the set of all L-theories in <I>o We stipulate that xRaV iff 
a S i{^) and the following conditions hold for each formula A: 

Rl. A (^ y and aA G <1> implies aA € x; 

R2. f3A G y and aA € <1* implies min(Q, /3)yl G x; 

R3. 13 < a and /3^ € x implies f3A E y. 

We also let Wl/^, x Ih p iff p € x, for any L-theory x. 

Lemma 4.4 Suppose L contains HJs with S = i{^)- Then Wl/^ is an RJs- 
model. 



*In positive logic there is no harm in allowing an 'inconsistent' theory a:: = $ as a node. 



Proof. To check the polytransitivity assume xRayRpz and a, /3 G ^(^)- We 
show a;i?inin{o,/3)-2 by checking R1-R3. \i A ^ z and min(a,/3)A G <5, then by 
the adequacy j3A G $ and hence j3A £ y. It follows that min(a, /3)A £ x. 

For R2 notice that min(7, a, /3) = niin(7, min(a, /3)). If'jA G z and niin(7, a, I3)A G 
$ then by the adequacy min(7, /3)A G ^ and hence min(7, I3)A G y. This in 
turn implies min(7, /3, a) A G x. Condition R3 is obviously satisfied, as all three 
theories have the same formulas of the form /3A for /3 < a. 

Second, we check condition (J). Assume xRaV and xRf^z with a < /3. We 
show zRoiV- Rl: If ^ G y and aA G <& then a A G x. Since a < (3 this 
implies aA G z. R2: If ^A G y and a^ G $ then min(7, a)A G x whence 
min(7, a)A G z for the same reason. R3 is, again, obvious. □ 

Lemma 4.5 For any A e ^, Wl/^,x \\- A iff A e x. 

Proof. Induction on the build-up of A. If A is a variable, T or has the form 
B AC, the argument is obvious. Assume A = aB. 

If X Ih aB then, for some y such that xRay, we have y Ih B. By IH it follows 
that B £ y and hence aB G x. 

Now assume aB G x. Let S := {/3C : (3C £ x,f3 < a} and let y be the 
deductive closure of S U {B} in <1>. By the IH we have y Ih i?. We claim that 
xRay which completes the argument. 

Assume D £ y, then T.,B h D. Then f\T.AaBhL a{f\T. A B) ^l aD. 
Hence, if aD G ^ then aD G y. Similarly, if 7Z) G y then S,i? h/, 7D. 
Then /\J: A aB hi a{/\T. A B) Hl a-fD h^ min(7,a)i:». If aZ) G $ then 
min(7, q)!) G $ whence min(7, a)!) G x. Finally, if /3 < a and /3L' G x then 
PD G S, hence f3D £y. D 

Lemma 4.6 (i) If L contains the monotonicity axiom and S = i{^), then 
Wl/^ is an RCs-frame; 

(ii) // L contains the persistence axiom, then Wl/^ is persistent. 

Proof, (i) Assume xR^y and /3 < a G i{^)- We show xRf^y by checking the 
three conditions, li A £ y and (3 A G <& then a A G <I> by the adequacy of 
^. Hence, a A G x and therefore by the monotonicity axioms x h (3 A. Since 
/3yl G <1> we obtain /3A e x. Similarly, if 7^4 G y and (3A £ ^ then a^ G $ by 
the adequacy. Therefore, min(a, 7)^ G x, whence by the monotonicity axioms 
X \- min(/3, 7)^. Since both 'jA and pA are in $, it follows that min(/3, 7)^ G x 
which proves the second condition. The third condition is obviously satisfied. 

(ii) Assume xR^^y. If y Ih p then j* G y; by the adequacy wp G <& and hence 
ujp G X. It follows that x h^ ujp h^ p and x Ih p. □ 

Taking ^ = C and Wl := Wl/^ we obtain the completeness of RJ, RC 
and RCtj w.r.t. their respective classes of models. 

Theorem 1 (i) A h^j B iff A^ B is valid in all RJ-models; 
(ii) A hR,c B iff A\- B is valid in all RC-models; 
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(iii) A l-RCo; B iff A\- B is valid in all persistent RC-models. 

Proof. The three systems are sound by Lemma [4. 2 [ The completeness is proved 
by observing that Wl, for each of the three logics L, is a model of the corre- 
sponding type. Assume A F^ B. Then letting x denote the L-theory generated 
by A we have B ^ x, hence by Lemma 14.51 Wl,x ¥ B. O 

Next we discuss the finite model property of the three logics. For RJ the 
answer is obvious, but for RC and RCw we have a small complication due to 
the fact that modality u is present in the language. 

Corollary 4.7 A |-rj B iff A\- B is valid in all finite RJ-models. 

Proof. Assume Ai^nj B, let <I> be a finite adequate set of formulas containing 
both A and B. We have Wrj/$, x \\- A and Wrj/$, x¥ B. Moreover, >Vrj/$ 
is a finite RJ^-model, where S = l{^)- By putting R^ ■= 0, for any a ^ i{^), 
we expand VVrj/<1* to an RJ-model in C falsifying A\- B. O 

A similar argument does not quite work for RC, as the expansion by empty 
relations leads, in general, outside the class of RC-models. However, for a finite 
signature S we do have an analog of Theorem [TJ 

Corollary 4.8 Suppose 5 C a; + 1 is finite. 

(i) A l~RCs B iff A\- B is valid in all finite RCs-models; 

(ii) A l-RCws B iff A\- B is valid in all finite persistent RCs-models. 
Lemma 4.9 Let S" C cj + 1 and a ^ S. Any RCs-model can he expanded to an 

Proof. Let W = (VF, {Rp)p(is) be a given RCs-model. Denote: 5"+ := {/3 G 
S : a < 13} and 5" := {^ G 5 : /3 < a}. If 5"+ = we can put R^ := 0. 
Otherwise, for any relation i? on 1^, denote 

R' ■.= RURRU [J R^^R. 

/3GS+ 

Further, define R^ := \Jnec. K, where R^ := \JpeS+ ^/S? ^a^' ■= (K)' ■ 

Notice that R Q R' , for any R. It follows that Rp 'Z R^ ^ Rex, for each /3 G 
S^ . By the construction, Ra is transitive and RZ Ra C R^^ hence condition 
(J) is satisfied for all a < /3 G S'^ . Moreover, the polytransitivity follows from 
the transitivity and the monotonicity properties. Therefore, {W, {Ri3)/B^s+u{a}) 
is an RC5+u{Q,}-model. 

We have to show that {W,{R^)j^g-^j^a}) is an RC5-y|Q}-model. To this 
end we prove that, for each n and 7 G 5~, 

1. R^ C i?^; 

2. {Ra)~ R-f ^ -^7- 
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Both statements are verified by induction on n. The basis of induction holds, 
since the original model was an RCs-model. Assume the statements hold for 
i? = fiJJ and consider R' = R'^+^. 

1. We have R C R^ by the IH. Further, RR C R^R^ C i?^, since R^ is 
transitive. For any /3 G 5'+, R^ R C i?^ R^ C R^, since condition (J) holds in 

W. Hence, R' = RURRU U/3e5+ Rp^R ^ -^7; as required. 

2. We have R'^R^ C i?^ by the IH. Further, (RR^'^R^ = R-^iR'^'Ry) C 
R-^R^ C R^. Finally, for any /3 G 5"+, {R'^^R)'^Ry = R'^RpR-^ C i^-^i?^ C 
i?^. Therefore, {R')~^R^ C i?^, as required. □ 

Remark 4.10 The given proof also works for the more general analogs of RC, 
e.g., for logics with linearly ordered sets of modalities (see [1]). 

Taking into account that expansions of persistent models are persistent, we 
obtain the following theorem for both RC and RCw. 

Theorem 2 Let L be either TiC or RCw. The following statements are equiv- 
alent: 

(i) A hi B; 

(ii) A \-Lj^^ B, for some finite f/ C a; + 1; 

(iii) A hig B where S = i{{A, B}). 

Proof. Clearly, (iii) implies (i), and (i) implies (ii) by compactness. We prove 
that (ii) implies (iii). Assume A\^l^ B. By Corollarv 14.81 there is a finite RC5- 
model W falsifying A \- B. Assume any finite U be given. We may assume 
S QU (otherwise clearly A^l^ B). By Lemma 14.91 W can be expanded to an 
RCc/-model falsifying the same sequent. Hence, Ai^i^j B. □ 

Thus, even though we do not have the finite model property for RC and 
RCct; in the full language, they are conservatively approximated by their frag- 
ments with this property. Together with Corollary 14.81 this yields 

Corollary 4.11 The systems RC and RCo; are decidable. 

For the logics RJ and RC a sharper result can be stated. As we have seen, 
the question whether a sequent A\- B is provable in such a logic L is equivalent 
to the same question for the logic Ls with S = i{{A,B}). However, for any 
finite S, the logic Ls is modulo renaming of modalities the same logic as Ln for 
n = IS*! (we identify n with the set {0, . . . ,n — 1}). The systems L„ are shown 
to be polytime decidable [10]. Therefore, we obtain 

Corollary 4.12 The systems RJ and RC are polytime decidable. 

The same result holds for RCcj, however we cannot directly refer to Dashkov's 
theorem. This question is considered in the next section, where we also obtain 
somewhat sharper complexity estimates for the cases RJ and RC. The material 
of that section, up to Theorem |H is due to Dashkov [lUJ. 
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5 Polytime decidability of RCoj 

We have to develop some combinatorial techniques to deal with positive logics. 
It allows one to state the Kripke completeness results in a sharper form, from 
which the complexity bounds are easily read off. 

Definition 5.1 We can associate with each positive formula A a treelike Kripke 
model T[A] in the signature i{A) called its canonical tree. It is essentially the 
parse tree of A viewed as a Kripke model. 

If ^ is a variable or T, then T[A] is a one-point model {a} with the empty 
relations, and the only variable true at a is A. 

li A = B A C then T[A] is obtained from the disjoint union of the models 
T[B] and T[C] by identifying the roots. We declare any variable p true at the 
root of T[A] iff it is true at the root of either T[B] or T[C]. 

If yl = aB then T[A] is obtained from T[B] by adding a new root r (where 
all variables are false), from which all the points of T[B] are -Ra-accessible. 

We write T[A] \\- ip ii (p is true at the root of T[^]. Then, one can easily 
verify the following properties: 

• Each Ra on T[A] is an irreflexive forest-like binary relation; 

• T[A] Ih A. 

Definition 5.2 A homomorphisni of a Kripke model V into a Kripke model 

W (of the same signature S) is a function f : V ^ W such that 

• Vx,y € V (xRaV =^ f{x)Raf{y)), for each a £ S; 

• If V, X Ih p then W, f{x) Ih p, for each variable p. 

Let W be a Kripke model and a G W. The submodel Wa of W generated 
by a is obtained by restricting all the relations and the valuation of W to the 
set of all nodes x &W such that there is a path a = xqRxiR . . . Rxn = x where 
R = Uag5 ^a- A model W is called rooted if it has a distinguished element a 
(called the root) such that Wa = W. We notice that in polytransitive rooted 
frames every node is reachable from the root in one step. 

Let V and W be rooted Kripke models. A simulation of V by W is a 
homomorphism / : V — > W mapping the root of V to the root of W. 

Lemma 5.3 If A is strictly positive and f is a homomorphism of V into W, 
then 

V,xh A^W,f{x)h A. 

Lemma 5.4 W,x Ih B iff there is a homomorphism f : T[B] — )• W mapping 
the root of T[B] to x. 

Proof. Suppose / : T[B] ^> W is such a homomorphism. We have T[B]^r Ih B 
where r is the root of T[S]. Since B is strictly positive and /(r) = x, by Lemma 
[Ql W,x\V B. 
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Suppose VV,x Ih B. We construct a homomorphism / : T[B] — )■ W by 
induction on the complexity oi B. If i? is a variable or T, the claim is obvious. 

If B = C A D then W, x Ih C,D. By the IH, there are homomorphisms of 
T[C] and T[D] into W mapping the respective roots to x. The homomorphism 
of T[B] is defined as the union of these maps. We note that if T[B] Ih p then 
either T[C] Ih p or T[D] Ih p, by the definition of T[i?]. In either case we have 
W, X Ih p, therefore the variable condition at the root is met and we have a 
homomorphism of T[B] into W. 

If i? = aC and W, x Ih B, then there is a node y € W such that xRaV and 
W, y Ih C. By the IH, there is a homomorphism of T[C] into W mapping its 
root to y. We extend it by mapping the root of T[B] to x. All the variables are 
false at the root of ^[2?], so the variable condition is met. □ 

Let RC5[74] (RJ5[A]) denote the RCs-closure (respectively, RJs'-closure) of 
T[A],wlieve S^£{A). 

Theorem 3 (i) A hRj B iffRJs[A] Ih B, where S = i{A); 
(ii) A hRc B iffRCs[A\ Ih B, where S = i{{A,B}). 

Proof. We prove Statement (ii). The case of RJ is similar but simpler. 

(only if) Since T[A] Ih A and the relations of RC5[A] extend those of r[^], 
we have RC5[^] Ih A. By Theorem [21 A hRc B imphes A \-rcs B. Hence, by 
Corollary HSl RCs[A] Ih 5. 

(if) Assume A Frc B. There is a rooted RCs'-model W such that W Ih ^4 
and W l^ B. By Lemma 15.41 there is a simulation / : T[A] — > W. Since 
W is an RC^-model, / lifts to a simulation of RC5[A] by W. In fact, we 
can define on T[A] new relations R'^ by letting xR'^y iff f{x)Raf{y) in W. 
Then (r[^], {R'^)a£s) is an RCg-model with Ra C i?^, for all a € S. Hence, 
denoting by R'^ the relations of RC5[A], we obtain R'^ C R'^, for each a G 5". It 
follows that W simulates RC5[^] by /. Then, since Wlh i?, we conclude that 
RC s{A] ¥ B,hy Lemma EH □ 

Theorem 4 The logics RJ and RC are decidable in time bounded by a polyno- 
mial (of degree three and four, respectively) in the length of the sequent A\- B. 

Proof. It is well-known that the problem of checking whether a modal formula 
C/9 is true at the root of a finite Kripke model W in a finite signature S is solvable 
in time 0(||W^|| • \(p\), where \\W\\ denotes the sum of \W\ and the number of 
pairs {x,y) such that xRay, for some a € S (see [HI Proposition 3.1]). 

Let 1^1 denote the number of symbols in a formula A, and let S = i{{A, B}). 
We can estimate |RC5[^]| by \A\ and ||RCs'[yl]|| by 0{\A\'^ ■ n), where n = 
\S\. This yields a bound of the form 0(|^p • n • \B\) on the complexity of 
checking whether RC5'[^] Ih B. Noting that n ^ 1^41 + |i?| yields a fourth 
degree polynomial bound in the length \A\ + \B\ of the input. 

For the logic RJ this can be slightly improved. One can observe that in 
the graph RJ5[^] (where S = i{A)) there is no more than one oriented edge 
between any pair of points. This yields a bound 0(|^p) on ||RJ5[^]||, and a 
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bound Od^p • \B\) on the complexity of the algorithm, thus, a third degree 
polynomial in the length of the input. □ 

Remark 5.5 Since the input of the problem is naturally divided into two parts 
A and B, measuring the complexity in terms of two parameters \A\ and \B\ 
appears to be more meaningful than expressing it in terms of the total length 
of the input. Thus, the more informative bounds are 0(|^p ■ n ■ \B\) for RC 
and 0(|A|2 . \B\) for RJ. 

Next we turn to the logic HCoj. We define RCa;5[A] as the model whose 
frame coincides with that of RC5'[^] and whose valuation function v' satisfies: 

v'{x,p) = 1 <;=^ {v{x,p) = 1 or 3y {xR^y and v{y,p) = 1)), 

where v is the valuation of RC5'[A]. Clearly, RCa;5[A] is persistent. 

Theorem 5 A Hrc,^ B iffRCLOs[A] Ih B, where S = e{{A,B}). 

Proof. The proof is similar to that of Theorem [3l we elaborate the (if) part. 

If A !e^-R,Cui B, there is a rooted persistent RCs-model W such that W Ih A 
and yV )ff B. By Lemma 15.41 there is a simulation / : T[A\ — >■ W. As before, 
since W is an RC5-model, / lifts to a simulation of RC5'[^] by W. We claim 
that / also lifts to a simulation of RCa;5[^] by W. Assume RCw5[^] \\- p. If 
RC5[A] Ih p then W, f{x) \\- p and there is nothing to prove. If xR^y in RC5[j4] 
and RC5'[74],y Ih p, then W, /(y) Ih p. Hence, by the persistence of W, we 
obtain W, f{x) Ih p and the claim is proved. Therefore, since W ih i3, we have 
RCws'[A] ¥ B,as, required. □ 

Now we notice that ||RCa;5[A]|| has the same bound as ||RC5[A]||. Hence, 
we obtain 

Corollary 5.6 The logic RCw is decidahle in time hounded by a polynomial 
(of degree four) in the length of the sequent A\- B. 

6 Irreflexive models 

The Solovay construction works with the irreflexive models. Therefore we would 
like to have a characterization of RC and RCw in terms of suitable irreflexive 
models. We modify the construction of the canonical model from the previous 
section. This modification is similar to the one given by Dashkov jT^ which in 
turn derives from the work of Japaridze [16] and Ignatiev [15] . 

Let -L be a logic containing RC and let $ be an adequate set of formulas. 
We work in the setup of the previous section. We define a Kripke model VVj^/$ 
which coincides with Wl/^ but for the definition of the relations. We stipulate 
that xR'^y in W^/$ iff xRay and following condition holds: 

R4. There is a formula aA € x such that aA ^ y. 

The model W^/'I* has the following properties. 
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Lemma 6.1 (i) W^/<I> is an RJ-model; 

(ii) All R'^ are irreflexive; 

(iii) R'^ = 0, fora^£{<^). 

In order to prove the canonical model lemma we need an additional fact. 

Lemma 6.2 For any A and a, A Frcw oA. 

Proof. The simplest proof of this fact involves arithmetical interpretations. As- 
sume A l-RCw oA. Fix an arithmetical interpretation * mapping all variables to 
the standard numeration of PA. By Proposition l3.2l we obtain A* hpA ConQ,(^*). 
Since A is a, positive formula, A* is (a numeration of) a sound arithmetical the- 
ory T. However, this contradicts Godel's second incompleteness theorem for T. 
D 

Lemma 6.3 For any A e ^, W'i^/^,x \\- A iff A e x. 

Proof. The proof is similar to that of Lemma 14.51 We only treat somewhat 
differently the case A = aB, the 'if part. 

Assume aB € x. As before let S := {/3C : /3C G x, /3 < a} and let y be the 
deductive closure of S U {B} in <1>. By the IH we have y Ih B. We claim that 
xR'^y which completes the argument. 

We already know from Lemma 14.51 that xRo,y. To check R4 it is sufficient 
to observe that aB G x but aB ^ y. If aB £ y we would obtain S, B h^ aB, 
but then f\T, A B \-l f\^ A aB \-l a{f\ S A B), contradicting LemmaEZl □ 

A model W is called ^-monotone, if for any aA € ^ and /3 G £{^) such that 
a < /3, >Vy$,x Ih ^A implies Wy$,x Ih aA. 

Lemma 6.4 (i) W'j^/^ is ^-monotone; 

(ii) VV£/$ is persistent if L contains RCw. 

Proof, (i) Assume W£/<1>, x Ih 13 A, aA e ^ and a < /? G £($). By the adequacy 
of <I> we have (3A G $. Then by Lemma [6.31 we obtain f3A G x. Hence, x h^ aA 
and since aA G ^ also a^ G x. This yields >V^/'I>,x Ih aA by Lemma |6.3[ 
Statement (ii) is obvious by Lemma [631 since Wl/^ is persistent. □ 

We summarize the information obtained so far for L = RCo;. 

Proposition 6.5 Let ^ be a finite adequate set. Then there is a finite model 
W such that 

(i) W is an irreflexive RJ-model; 

(ii) Ra = 0, for all a ^ £($); 

(iii) W is ^-monotone and persistent; 

(iv) For any 'RCuj-theory P in $ there is a node x £ W such that, for any 
formula A, AeT iffW,x\\- A. 
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7 Arithmetical completeness 

Theorem 6 For any sequent A\- B the following statements are equivalent: 
(i) A\- B is provable in RCa;; 

(ii) A* hpA B* , for all arithmetical interpretations *; 
(iii) A* \- B* , for all arithmetical interpretations *. 

Proof. The imphcation from (i) to (ii) is Proposition 13. 2i Statement (ii) triv- 
iahy implies (iii). To infer (i) from (iii) we argue by contraposition and assume 
A J^RCo; B. Consider a finite adequate set $ containing A^B, and let W be 
a finite Kripke model satisfying the conditions of Proposition 16.51 It falsifies 
A\- B sX, some node x. We can restrict W to the submodel generated by x, so 
that W is rooted and falsifies ^ h i? at the root. 

Now we proceed to a Solovay-type construction. As usual, we identify the 
nodes of W with a finite set of natural numbers {1, . . . , A^} so that 1 is the root. 
We then attach a new root to W by stipulating that QRqx, for each x € W . 
The valuation of variables at will be the same as in 1, this ensures that the 
new model is persistent. Abusing notation we denote this model by the same 
letter W. We also assume that the Ra relations and the forcing relation x\\- C 
on W are arithmetized in a natural way by bounded (even open) arithmetical 
formulas. 

We fix an arithmetical formula Prf„(x,y) naturally expressing that y is a 
proof of a formula x from the axioms of PA and true Tin- sentences. The formula 
Prf„(x, y) has logical complexity A„+i in PA. Without loss of generality we may 
also assume that Prf„, is chosen in such a way that each number y is a proof of 
at most one formula, and that any provable formula has arbitrarily long proofs. 
These properties are also assumed to hold provably in PA. 

The formula ^n{x) '■= 3yPrf„(x,y) expresses that x is provable in PA from 
the set of all true n„-sentences. We usually write □„,(/5 for □„(^(^~'). It is easy 
to see that Con„(o"pA) is equivalent to -iDn-L. 

Definition 7.1 Let M denote the maximal modality m < oj occurring in $, 
if there is such an m, and otherwise. We define a family of Solovay-style 
functions hn : uj ^ W, for all n < u, as follows: hn{0) = and 



hnix + 1) 



y, if hi(x) ^ hi{x + 1) = y, for some i < n; otherwise 

z, if 3k ^ max(M, n) Prf„('~£jt ^ z~',x) and 

either hn{x)RnZ or hn{x)RujZ; 
hn{x), otherwise. 



Here ik denotes the limit of the function hk- The functions hn can be defined 
in such a way as to satisfy the following conditions: 

• The graph of each hn is definable by a formula Hn which is A„_|_i in PA; 
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• The function (^ : n i— >■ '~Hn~' is primitive recursive; 

• Each hfi satisfies the clauses of Definition 17.11 provablv in PA. 

The definition of the functions hn can be arranged as a solution of a fixed 
point equation in PA using the standard methods. The details are given in the 
Appendix. 

Informally, the behavior of the functions hn can be described as follows. The 
functions with lower index have higher priority, therefore whenever hm makes 
a move to y, all functions hn with n > m do the same. Otherwise, hn moves 
like the usual Solovay function, but for the following peculiarities: 

• hn also reacts to proofs of the limit statements for all functions of lower 
priority (not only to those of itself) ; 

• hn is not only allowed to move along the Rn relation but also along Ri_j. 

Lemma 7.2 For each n,m, provably in PA, 

(i) 3lz(£Wen = z; 

(ii) £nRn+l^n+l Or £nRujin+l Or in = in+i; 

(iii) If m < n then im = In or (.niRa^n, for some a G (m, n] U {oj}- 

Proof. Statement (i) is proved by (external) induction on n. It is easy to see 
that the limit of ho exists, as /iq only moves along Rq^ which is irreflexive and 
transitive. Suppose in-i exists. As soon as /i„_i reaches its limit, /i„ can only 
jump along Rn or R^. We observe that, by the polytransitivity, the relation 
Rn U R^ is transitive and irreflexive. Hence, d-n exists. 

Statement (ii) follows from the same consideration and the fact that hn+i 
has to visit £„ on its way to the limit. Statement (iii) is obtained from (i) by 
induction on n. □ 

Lemma 7.3 For all n, N N (£„ = 0). 

Proof. By Lemma [7.2l for all n > M, either inRw^n+i or In+i = ^rn as R^ = 
for k > M. Since R^j is transitive and irreflexive, there is a z € W and an m 
such that in = z, for all n ^ m. Assume z ^ and let m be the minimal n 
such that in = z. Then the function hm has to come to z by the second clause 
of Definition 17.11 Hence, for some n ^ max(M, m), On^^in ^ z). Since PA is 
sound, in "/^ z is true, which is not the case since n ^ m. □ 

For any modal formula C, let in\\~ C denote \/{in = a : a\\- C}. 
Lemma 7.4 For any formula C , for all n > m ^ M , 

PA h {in \\r C) -^ (im Ih C). 
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Proof. Each /i„ for n> M can only follow the Ri^ relation. By the persistence 
of W, the truth of any formula is inherited downwards along Ri^. Hence, the 
claim follows from Lemma 17.21 □ 

Lemmas 17.21 17.4] are obviously formalizable in PA (uniformly in m,n). 

Suppose {ifi : i € 1} is a primitive recursive set of formulas. With a 
primitive recursive program computing this set we associate a numeration for 
the theory PA + {ipi : i G /} that will be denoted [ifi : i a I]. We write 
Conn[(pi : i G I] for Con„([c/?j : i S /]). In particular, if this set is a singleton 
{(f}, the formula Conn[93] means the same as Con„((^) and is PA-equivalent to 
-.n„-.c^. 

Using this notation, we interpret each prepositional variable p as follows: 

p* := [i^hp-.n^M]. 

We prove the following two main lemmas. 

Lemma 7.5 For any formula C E $, 

[4 Ih C : n ^ M] hpA C*. (*) 

Proof. Induction on the build-up of C. The cases of propositional variables, T 
and A are easy. 

Assume C = mD for m < oj. Since (mD)* = Con ^jD*) numerates a 
finite extension of PA, it will be sufficient in this case to infer CoiimiD*) from 
(m \\- mD in PA. We have, by the IH, 

PA + Conm[in Ih D : n ^ M] h Con^(L>*). 

However, Conm[^n \\~ D : n ^ M] is equivalent to the formula 

Vn^MCon^[ALAf(41^^)], 
which is by Lemma 17.41 equivalent to 

Vn^MCon^[4IHD]. (3) 

Thus, we are going to infer sentence ([3]) from Im II~ ttt-D by formalizing the 
following argument in PA. Assume Im II~ rnD, hence there is a z such that 
z \\- D and (.mRthZ- Consider the point im- By Lemma 17.21 either imRk^M 
for some k > m, or lmRu)^M or im = ^M- In each case, imRmZ, as W is an 
RJ-frame. 

Assume 3n ^ M -iConm[£„ Ih D], then □m(4 ^ D). Since (provably) 
z Ih D, we have FTm[in 7^ z]. Let xq be such that Vx ^ xq hm{x) = £rn- There 
is a y > a; such that Prfm(^£„ ^ z~',y). Then, hm{y + 1) has to be different 
from iffi, a contradiction. This shows that Im II~ 'mD implies ([3]), as required. 

Consider the case C = ujD. Firstly, we have 

[Con„(Z)*):n^M]hpA(6^£')*, 
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where we may restrict the left hand side to n ^ M, since the strength of the 
formulas Con„ increases with n. By Lemma 17.41 and the IH, as before, 

[VA; ^ n Couniik \h D]:n^M] hpA [V/c ^ M Con„[4 \h D]:n^M] 

hpA [Con„(L>*) : n ^ M]. 

We are going to show that 

[In hujD-.n^M] hpA [V/c ^ n Con„[4 Ih L>] : n ^ M]. 

To this end it is sufficient to prove by an argument formalizable in PA that, for 
any n ^ M, 

PA + (4 Ih u}D) hyk^n Con„[4 Ih D]. 

Consider any n ^ M and assume In ll~ u}D. There is a z G W such that 
z \\- D and inRojZ. If 3k ^ n □„(£fc \^ D) then 3A; ^ n □n(£fc 7^ z). This means 
that hn must quit 4, a contradiction. □ 

Lemma 7.6 For any formula C & ^, 

4 / V C* hpA [4 Ih C : n ^ M]. (**) 

Proof. Induction on the build-up of C. The cases of propositional variables, T 
and A are trivial. 

Assume C = mD for m < lo. Since ^0 7^ is equivalent to a Si-formula, we 
obtain 

PA + £0 y^ A Con^(D*) h Con^( 4 ^ V D*) 

h Con^[4 Ih D : fc ^ M] 
h V/c^MCon„[4 lhL>]. 

Thus, it is sufficient to prove, for each n ^ M, that 

PA h 4 / A 4 ih mD ^ 3/c ^ M □„(4 ih D). 

We reason as follows. 

Assume 4 ^ m-D. By Lemma 17.21 we have imRk^n, for some k > m, or 
^mRui^n or Ini = 4- Siucc W is a RJ-frame, in each case 

Im^mD. (4) 

Let a := £mi we have 

3x {hn,{x) = aA^y'^ x {hm~i{y) = hm-iix))). {Lm{a)) 

The statement Lm{a) is expressible by a S^+i-formula. Hence, On^Lmia). 
Moreover, Lm{a) implies that hm goes along the Rm U R^j relations from a 
onwards. Hence, for any k ^ m, -Lm(o) implies 4 £ Rmi'^) U {^}) where 

R*m[a) := {y £ W : 3a '^ m aRay}- 
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Therefore, we conclude: 

VA;^mn^(4Gi?;,(a)U{a}). (5) 

On the other hand, we claim that Vz € R^{a) z \)f D. Indeed, if aRaZ, 
a ^ m and z \\- D, then a Ih aD whence a Ih mD, by the $-nionotonicity of 
W. This contradicts (JH). Since the formula Vz G Rm{a) z ¥ D \s bounded, it 
follows that 

n^{\Jz(^R*^{a)z¥ D). (6) 

Next we consider the minimal i ^ m such that ii = im = cl. Since we 
assume io ^ 0, we also have £m = o ^ 0. The function hi could only have come 
to a by the second clause of the definition of hi , therefore we obtain 

3A; ^ max(i, M) 0^(4 / a). 

Since i ^ m, obviously we can weaken this to 

3k ^ M □„(4 / a). (7) 

Together with ([5]) this yields 3k ^ Mnm(^fc S R^{a)), whence by ((61) we obtain 
3k ^ Af □m(4 il^ D), as required. 

Finally, consider the case C = loD. We have 

(loD)* = [Con„(L»*) -.neco]. 

For each of the axioms Con„(D*) such that n ^ M, by the IH and persistence 
we obtain, as before, 

PA + 4 / A Con„(i:>*) h Vfc ^ M Con„[4 Ih D]. 

This fact is formalizable in PA uniformly in n, therefore 

4 7^0 V {loD)* hpA [VA: ^ Af Con„[4 Ih D] : n ^ AT]. 

We are going to show that 

£o 7^0 V [V/c ^ Af Con„[^fe Ih f)] : n ^ M] hpA [4 Ih wf) : n > Af], 

which completes the proof, because by Lemma 17.41 

[in ¥ujD:n> M] hpA [4 Ih wf) : n ^ Af]. 

Thus, we prove by an argument formalizable in PA uniformly in n that, for 
any n > M, 

PA + (4 / A 4 ^ ujD) h 3fc ^ Af □„(4 Ih f)). 

Assume n > Af , 4 ^ wf) and let a := 4- Since 4 / we have a / 0. Consider 
the minimal m ^ n such that Im = ^n = d. As before, we first show that 

\/k ^ max(m, M) □„(4 G f?a;(a) U {a}). (8) 
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We consider two cases, lim > M then we have both Lm{o) and □m(-^m(o))- 
Moreover, loi k ^ m > M, from Lm{a) we can infer l^ £ Ru]{o) U {a}, since hk 
can only make moves along the R^^ relation from a onwards. (Here, Rui{a) := 
{x &W : aR^x}.) Hence, \/k '^ m nml^fe £ Ruj{a) U {a}) and the claim holds. 

If m ^ Af < n we first notice that Im = o,- Then, n„(^jy,^ = a), since the 
formula Im = a is Sm+2 Q ^n+i- Moreover, Im = a implies £k G Ruia) U {a}, 
for any k > M, since h^ will only be able to move along Ri^ from a onwards. 
Thus, we obtain \/k ^ M □„(£fc G Ruio.) U {a}), and the claim also holds. 

Secondly, we note that ik G Ru}{a) implies ik ^ D, as \/z G Ru){a) z ¥ D. 
Hence, by ®, 

VA; ^ max(m,M) □„(4J^L> V4 = a). (9) 

Thirdly, since a 7^ 0, by the definition of hm we have 
3k ^ max(M, m) □m(4 7^ '^)- 

Together with ([9|) this yields Bfc ^ max(M, m) □n(^fc J^ -D). In either case we 
obtain 3k ^ M n„(4 ¥ D). □ 

Recall that at the node 1 G W there holds 1 Ih A and 1 ¥ B. Let a denote 
[in = ^ '■ n ^ M] and S denote the corresponding theory. By Lemma 17. 5^ 
a hpA A*. On the other hand, by Lemma 17.61 



^0\/ B* hpA [in \\- B :n^ M] hpA [4 / 1 : n ^ M]. 



Hence, A* h B* yields S h iM 7^ 1- It follows that S is inconsistent. Since 
PA h 4 = 1 ^ ^m = 1, for all m ^ n, the inconsistency of S yields a PA-proof 
of in 7^ 1, for some n ^ M. This means that /iq must eventually quit 0, hence 
io 7^ 0. But this is impossible, since 4 = is true in the standard model. □ 

Example 7.7 By Example 14.31 ^P ^ ^Q ^HCw oj{p f\ q). By Theorem [6l this 
means that there are theories S", T containing PA such that 

PA + RFN(5) + RFN(r) F RFN(5 + T). 

Primitive recursive numerations of these theories can be obtained from the proof 
of Theorem [6] applied to (an irreflexive version of) the three-element Kripke 
model described in Example 14.31 

We remark that none of these two theories can have bounded arithmetical 
complexity over PA. Suppose S is axiomatized by a set of H^+i-sentences over 
PA. Then, by Lemma 13.31 Con„((T) hpA o". By Corollarv 13.61 it follows that 

PA + Con^(o-) + Con^(r) h Con^(r V Con„(cr)) h Con^(r V a). 

This shows that the use of infinitely axiomatized theories to interpret proposi- 
tional variables is necessary for the validity of Theorem [6l 
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8 Conclusions 

We believe that positive provability logic, despite the absence of Lob's axiom, 
strikes a good balance between expressivity and efficiency (the latter can be 
understood formally, as the computational efficiency, as well as informally, in 
the sense of convenience) . Together with [TU] this paper shows that positive logic 
can be nicely treated both syntactically and semantically. More importantly, 
it has very natural proof-theoretic interpretations not extendable to the full 
modal logic language. 

There are many questions related to this logic that can be further investi- 
gated. One direction is to study normal positive logics along the lines of the 
usual normal modal logics. In particular, we are interested in their efficient 
proof systems, general results on axiomatization and completeness, interpola- 
tion properties, and so on. 

Another direction is the study of different arithmetical interpretations of 
positive provability logic. For example, one can consider from this point of view 
transfinite iterations of consistency assertions (or of higher reflection principles). 
That is, one can introduce modalities O", for each ordinal a of some canonical 
ordinal notation system, and interpret them as the schemata Con" related to the 
so-called Turing progressions: Con''(cr) = Con(cr); Con"{a) = {Con[Con^(a")] : 
f3 < a}. It would be interesting to find a complete axiomatization of the 
corresponding positive logic. 

Another generalization is to consider stronger reflection schemata definable 
in the extensions of arithmetical language, e.g., in the second order arithmetic 
or in the arithmetic enriched by truthpredicates. This generalization is partic- 
ularly interesting from the point of view of applications in the ordinal analysis 
of predicative theories. 
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A Arithmetization of the Solovay functions 

Given a finite irreflexive RJ-frame W we would like to build a family of arith- 
metical functions hn '■ to —^ W, for all n ^ uj, satisfying the following conditions: 

• The graph of each /i„ is definable by a formula Hn which is A„+i in PA; 

• There is a primitive recursive function iff, : n ^^ '~Hn~^, where e denotes 
the primitive recursive index of this function; 

• Each hn provably satisfies the clauses of Definition 17.11 

These objects will be constructed using the formalized recursion theorem. 
The main unknown is the index e. 

Firstly, we stipulate that the limit statements in = z are abbreviations 
for the formulas 3N ^k > N Hn{k,z). Secondly, we fix a primitive recursive 
function qq such that 

''in = z~' = goCHn'', z) = go{ipein), z). 

We see that the function g{e, n, z) := gQ{{pe{n), z) is provably total recursive in 
PA, hence it is definable by an arithmetical Ai-formula. 

Using g, Definition 17.11 can be rewritten to define the graphs of h^ in the 
language of arithmetic with the unknown e as an extra parameter. We denote 
such parametrized versions of the formulas H^ by H'n- Each formula H'^ uses 
the formulas Hq, . . . ,H^_i as subformulas to express the first clause of the 
definition of /i„. Thus, we obtain a sequence of formulas of the following form: 



Ho{e,x,y) o Ao{e,x,y) 
H[{e,x,y) o Ai(iJo;e,x,y) 

H'n{e,x,y) ^ An{HQ,...,Hn_^;e,x,y) 

Here, the formulas An directly mimic Definition 17.11 It is easy to convince 
oneself that the arithmetical complexity of the formulas An (and hence, of the 
formulas H'^) is A„+i in PA. The most complex part of the definition is the 
formula 3k ^ max(M, n) PifnCik ¥" z~',x) occurring in the second clause. In 
the formula An this part takes the form 

3k ^ max(M, n) Prf„((7(e, k, z),x). 

Observe that the predicate Prf„ is A„_|_i (even Ao(Sn))) and the existential 
quantifier 3k can, in fact, be bounded by x. This yields a A„+i-formula. 

It is also clear that each formula H'^ is obtained from the previous ones in 
a primitive recursive way. Therefore, there is a primitive recursive function F 
satisfying F{e,n) = '~if^(e, x,y)~'. Finally, we obtain the required number e 
by applying (a formalized version of) recursion theorem for primitive recursive 
functions: ^e{n) := F{e,n). Then we can define Hn{x,y) := H'n{e,x,y). 



25 



